CCIS: CrowdStrike Certified Identity SpecialistDemo

By CrowdStrike · Question Mode

QuestionQ42

Risk Assessment

Which of the following can cause an identity-based incident type to change?

  • A A user changed the incident type in the console
  • B An exclusion added to the incident
  • C A user linked detections to the incident in the console
  • D Detections related to the incident
Explanation

An identity-based incident can evolve as additional related detections accumulate, and those detections can change its derived incident type. CrowdStrike’s CCIS objectives specifically cover incident evolution as detections accumulate and potential incident-type changes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!